The request to /js/ returns clearly obfuscated code: I didn’t need to look at the JavaScript to continue, but I never like to pass up the opportunity to deobfuscate something. If I then let the next request come through, I’m redirected to the login. I’ll let the request for / through, and right away, I see the page, without having authenticated:
js files, and make sure my Firefox hasn’t cached anything, I can request again with Intercept on.
If I change my Burp proxy to intercept requests for. Almost all the requests 404, except a couple js files, and the it requests /login.html, the form shown above: First it loads /, followed by a series of requests for various. I can go into Burp and see the series of requests. The site has the title “SB Admin 2”, and it loads a dashboard of some sorts, but then immediately redirects to a login page: Nmap done: 1 IP address (1 host up) scanned in 53.74 secondsīased on the IIS version, this looks like Server 2012 R2 or Windows 8.1. |_ Message signing enabled but not required |_ message_signing: disabled (dangerous, but default) |_nbstat: NetBIOS name: JSON, NetBIOS user:, NetBIOS MAC: 00:50:56:a4:ac:26 (VMware) Service Info: OSs: Windows, Windows Server 2008 R2 - 2012 CPE: cpe:/o:microsoft:windows
|_http-server-header: Microsoft-HTTPAPI/2.0 Starting Nmap 7.70 ( ) at 23:43 GMT Daylight Timeġ39/tcp open netbios-ssn Microsoft Windows netbios-ssnĤ45/tcp open microsoft-ds Microsoft Windows Server 2008 R2 - 2012 microsoft-dsĥ985/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) Nmap done: 1 IP address (1 host up) scanned in 22.05 seconds Not shown: 65494 closed ports, 27 filtered ports Warning: 10.10.10.158 giving up on port because retransmission cap hit (10). Starting Nmap 7.70 ( ) at 23:51 GMT Daylight Time
0 kommentar(er)
